CVE-2019-6501
Fixed in a distro release EPSS <1%
In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
Products: qemu, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:3.1+dfsg-3 |
| Debian 13 | qemu | 1:3.1+dfsg-3 |
| Debian 14 | qemu | 1:3.1+dfsg-3 |
| Red Hat Enterprise Linux 7 | qemu-img-ma | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-img-rhev | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common-ma | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-common-rhev | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-ma | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-ma-debuginfo | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev-debuginfo | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools-ma | 10:2.12.0-33.el7 |
| Red Hat Enterprise Linux 7 | qemu-kvm-tools-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 10 | qemu-img-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 10 | qemu-kvm-common-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 10 | qemu-kvm-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 10 | qemu-kvm-rhev-debuginfo | 10:2.12.0-33.el7 |
| Red Hat openstack 10 | qemu-kvm-tools-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 13 | qemu-img-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 13 | qemu-kvm-common-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 13 | qemu-kvm-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 13 | qemu-kvm-rhev-debuginfo | 10:2.12.0-33.el7 |
| Red Hat openstack 13 | qemu-kvm-tools-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 14 | qemu-img-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 14 | qemu-kvm-common-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 14 | qemu-kvm-rhev | 10:2.12.0-33.el7 |
| Red Hat openstack 14 | qemu-kvm-rhev-debuginfo | 10:2.12.0-33.el7 |
| Red Hat openstack 14 | qemu-kvm-tools-rhev | 10:2.12.0-33.el7 |
| Red Hat rhev manager 4.3 | qemu-img-rhev | 10:2.12.0-33.el7 |
| Red Hat rhev manager 4.3 | qemu-kvm-common-rhev | 10:2.12.0-33.el7 |
| Red Hat rhev manager 4.3 | qemu-kvm-rhev | 10:2.12.0-33.el7 |
| Red Hat rhev manager 4.3 | qemu-kvm-rhev-debuginfo | 10:2.12.0-33.el7 |
| Red Hat rhev manager 4.3 | qemu-kvm-tools-rhev | 10:2.12.0-33.el7 |